mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2095] A simple tool for profile/policies creation #1415
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1415
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @avilum on GitHub (Aug 24, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2095
I couldn't find a simple tool that defines the syscalls, permissions of a program, etc.
I created this simple script, based on strace and grep, that get's a list of all the unique syscalls of a binary, on the run.
This way, one can whitelist some flows of a program easily, without disassembling.
I'd be happy to create something bigger then that, a solution for nsjail+firejail policies definitions.
https://github.com/avilum/syscalls
@Vincent43 commented on GitHub (Aug 24, 2018):
You may also look at
firejail --buildoption.@chiraag-nataraj commented on GitHub (Sep 27, 2018):
@netblue30 I was thinking we could just put a note in the README or something linking to this repo?